MAC filter policies support three different filter types with normal, isid , and vid each supporting different set of match criteria.
The following list describes the MAC match criteria supported by SR OS or switches for all types of MAC filters (normal, isid, and vid). The criteria are evaluated against the Ethernet header of the Ethernet frame. Support for a match criteria may depend on H/W or filter direction as per below description. Match criterion is blocked if it is not supported by a specified frame-type or MAC filter type. Nokia recommends not configuring a filter in a direction or on hardware where a match condition is not supported as this may lead to unwanted behavior.
frame-type
The filter searches to match a specific type of frame format. For example, configuring frame-type ethernet_II matches only ethernet-II frames.
src-mac
The filter searches to match source MAC address frames. Operator can optionally configure a mask to be used in a match.
dst-mac
The filter searches to match destination MAC address frames. Operator can optionally configure a mask to be used in a match.
dot1p
The filter searches to match 802.1p frames. The operator can optionally configure a mask to be used in a match.
etype
The filter searches to match Ethernet II frames. The Ethernet type field is a two-byte field used to identify the protocol carried by the Ethernet frame.
ssap
The filter searches to match frames with a source access point on the network node designated in the source field of the packet. Operator can optionally configure a mask to be used in a match.
dsap
The filter searches to match frames with a destination access point on the network node designated in the destination field of the packet. Operator can optionally configure a mask to be used in a match.
snap-oui
The filter searches to match frames with the specified three-byte OUI field.
snap-pid
The filter searches to match frames with the specified two-byte protocol ID that follows the three-byte OUI field.
isid
The filter searches to match for the matching Ethernet frames with the 24-bit ISID value from the PBB I-TAG. This match criterion is mutually exclusive of all the other match criteria under a specific MAC filter policy and is applicable to MAC filters of type isid only. The resulting MAC filter can only be applied on a BVPLS SAP or PW in the egress direction.
inner-tag/outer-tag
The filter searches to match Ethernet frames with the non-service delimiting tags, as described in the VID MAC filters section. This match criterion is mutually exclusive of all other match criteria under a specific MAC filter policy and is applicable to MAC filters of type vid only.